Update build.yaml

Author: jeffmaki

.github/workflows/build.yaml

@@ -118,6 +118,9 @@ jobs:
 
         - name: Build and push
           run: |
+              #
+              # DO NOT INCLUDE ANY CREDENTIAL/SECRET FILES HERE SINCE ENVs ARE SAVED AS PART OF THE RESULTING IMAGE!
+              #
               docker compose -f docker-compose.override.build.yml -f docker-compose.yml build --build-arg CODE_VERSION=${CODE_VERSION} ${{github.event.inputs.build_flag}} 
               docker compose -f docker-compose.override.build.yml -f docker-compose.yml push 
               
@@ -128,16 +131,16 @@ jobs:
 
               # hosts
               WS_DOCKER_REGISTRY: ${{ vars.WS_DOCKER_REGISTRY }}
-              WS_POSM_DB_HOST: ${{ vars.WS_POSM_DB_HOST }}
+              #WS_POSM_DB_HOST: ${{ vars.WS_POSM_DB_HOST }}
 
               # passwords
-              WS_API_DB_PASS: ${{ secrets.WS_API_DB_PASS }}
-              WS_MAPBOX_ACCESS_TOKEN: ${{ secrets.WS_MAPBOX_ACCESS_TOKEN }}
-              WS_OSM_DB_PASS: ${{ secrets.WS_OSM_DB_PASS }}
-              WS_OSM_SECRET_KEY_BASE: ${{ secrets.WS_OSM_SECRET_KEY_BASE }}
-              WS_SMTP_PASS: ${{ secrets.WS_SMTP_PASS }}
-              WS_TASKS_DB_PASS: ${{ secrets.WS_TASKS_DB_PASS }}
-              WS_TASKS_SECRET_KEY: ${{ secrets.WS_TASKS_SECRET_KEY }}
+              #WS_API_DB_PASS: ${{ secrets.WS_API_DB_PASS }}
+              #WS_MAPBOX_ACCESS_TOKEN: ${{ secrets.WS_MAPBOX_ACCESS_TOKEN }}
+              #WS_OSM_DB_PASS: ${{ secrets.WS_OSM_DB_PASS }}
+              #WS_OSM_SECRET_KEY_BASE: ${{ secrets.WS_OSM_SECRET_KEY_BASE }}
+              #WS_SMTP_PASS: ${{ secrets.WS_SMTP_PASS }}
+              #WS_TASKS_DB_PASS: ${{ secrets.WS_TASKS_DB_PASS }}
+              #WS_TASKS_SECRET_KEY: ${{ secrets.WS_TASKS_SECRET_KEY }}
 
         - name: Deploy
           env: